Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
File: MCaAamuNrGjCoytlhJIpUk_DPac.mft (raw, json)
Hash identifier: BnSsTpsN7BKl8k3smgfhR0cvEkvYt9r0+HkYtGtMh+k=
Subject key identifier: BC:5C:30:95:22:F7:B5:6A:1C:8F:61:D3:CB:69:85:64:17:27:9E:D9
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 0194BC72FCA0B80EC1129B1C61EC29E752D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
Manifest number: 0BEE
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: HqEtipzQowxTqcDrA6YD2PAM22k.roa (hash: +TySDtYTZSAF4An5pdiKoQwn0LwGdYxQZAyZ18GrAFU=)
2: MCaAamuNrGjCoytlhJIpUk_DPac.crl (hash: CRMV7MVuNf+/NpQ4eFQN9CV307gynUZsNEByVS93fEg=)
3: VpK1wTsU78Ht4QsKw-JTT_j2Ico.roa (hash: WkwPvo6PSVgyt56GIK11MhVoaeSGnuVC/x51Dqj8kW8=)
4: zZaEXr3EtMrV5GDFqR230R4uN60.roa (hash: PjCIk2JcyvvjQjpjlwdj+cXINOEajOd0R5qhIPW9zZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fc:a0:b8:0e:c1:12:9b:1c:61:ec:29:e7:52:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=bc5c309522f7b56a1c8f61d3cb69856417279ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:89:f5:79:12:4e:a1:2c:0e:cb:72:3e:76:
e1:d7:e6:ec:9d:16:6a:15:41:ab:cb:c4:76:dc:d9:
b6:62:82:37:aa:00:ce:78:c5:3d:f8:1f:ef:41:84:
17:05:40:d4:71:71:d7:e1:88:56:b0:c6:1a:b9:70:
69:62:d2:30:ff:c6:79:11:af:06:7a:01:57:f9:ad:
79:3b:d5:68:30:d6:7c:56:f2:3e:f1:b4:88:18:7e:
f5:e1:7a:5d:5e:d6:46:2a:2d:32:2e:65:b1:e0:fc:
28:d1:a3:0a:2c:d2:cf:b0:c4:bb:62:6e:d1:36:8d:
7e:6c:d0:f3:52:89:bc:58:5b:31:ff:e5:d4:e1:23:
75:6e:2f:02:1e:fc:53:f9:39:bc:02:f6:9e:96:82:
1c:9f:12:8f:04:16:d9:74:a0:22:90:d1:6e:13:1f:
ae:d1:ad:e0:08:ad:fb:2d:27:9f:86:3d:17:bd:80:
d2:3a:e9:a2:01:a6:a8:c0:8c:49:6c:ea:f1:8e:75:
d2:54:14:9e:28:1d:e8:f7:4e:c2:33:1f:0e:77:b2:
6f:20:01:73:cf:af:5e:b2:dd:5c:76:55:20:35:86:
1b:20:c8:e8:8e:d9:e2:be:2a:62:1e:b7:2c:f3:d2:
6b:d4:46:ea:00:42:e7:63:81:cd:73:10:d5:d8:a3:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:30:95:22:F7:B5:6A:1C:8F:61:D3:CB:69:85:64:17:27:9E:D9
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d8:49:67:52:ff:e4:69:b1:f4:e3:5b:3d:13:1d:65:33:69:
41:d3:0b:37:9f:bb:a9:02:42:f4:77:f4:16:bd:8b:73:05:7f:
58:e5:ef:0c:f0:78:25:ee:8c:00:a5:fa:b3:25:41:0a:3d:69:
ce:dd:d7:46:ac:08:1e:b4:d3:b3:a0:74:6c:99:95:34:d6:c9:
80:df:3c:5a:62:72:f9:ac:44:bb:93:0c:bb:cd:62:75:a5:fe:
6c:20:1a:72:fd:e1:7d:bc:98:41:9b:a6:fc:39:42:c2:29:ff:
3a:5e:de:39:41:cc:1f:99:ac:35:40:58:11:9f:90:79:3b:ba:
c7:94:8b:9f:c4:89:2d:00:7f:73:c7:34:2e:9d:cc:a4:06:d2:
34:03:64:6a:86:05:2c:9e:0a:4a:0c:53:1a:22:54:d3:72:fd:
2b:98:02:f9:5c:c1:28:09:3e:14:22:0d:cc:28:31:87:bb:26:
f6:41:a4:56:5c:05:1a:41:77:fb:85:31:ee:66:4c:84:cd:37:
96:e6:75:d8:a4:af:aa:f2:dd:2d:e2:1c:c4:5b:e3:2b:ed:3e:
c9:53:4f:e8:63:c6:68:b6:d0:bf:6b:64:64:da:c7:7e:51:3f:
51:92:40:89:9e:be:70:ec:42:c6:5a:f7:e0:48:e8:86:e9:30:
fa:8d:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:41 2025 by rpki-client